| CVE-2026-126950 | NA | N/A | Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated attackers to delete ar… | 2026-11-13 |
| CVE-2026-126951 | NA | N/A | Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrar… | 2026-11-13 |
| CVE-2026-126952 | HIGH | 8.1 | Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that crea… | 2026-11-13 |
| CVE-2026-126953 | HIGH | 8.1 | Cudy TR3000 before 2.5.42 contains an OS command injection vulnerability that allows a malicious or compromise… | 2026-11-13 |
| CVE-2026-126954 | MEDIUM | 4.7 | Glance from 0.7.9 before 0.8.8 contains a stored cross-site scripting vulnerability that allows malicious exte… | 2026-11-13 |
| CVE-2026-126955 | MEDIUM | 5.3 | Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePage… | 2026-11-13 |
| CVE-2026-127073 | CRITICAL | 9.9 | OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gai… | 2026-11-13 |
| CVE-2026-127074 | MEDIUM | 4.3 | OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with b… | 2026-11-13 |
| CVE-2026-127075 | MEDIUM | 6.5 | OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users to rea… | 2026-11-13 |
| CVE-2026-127076 | MEDIUM | 6.5 | OpsTree BuildPiper before 2.7.0 contains a broken access control vulnerability that allows authenticated users… | 2026-11-13 |
| CVE-2026-127077 | HIGH | 7.1 | OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users… | 2026-11-13 |
| CVE-2026-127078 | HIGH | 7.1 | OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users… | 2026-11-13 |
| CVE-2026-127079 | HIGH | 7.4 | OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticat… | 2026-11-13 |
| CVE-2026-127080 | CRITICAL | 9.9 | OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated dep… | 2026-11-13 |
| CVE-2026-127081 | MEDIUM | 4.3 | OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users… | 2026-11-13 |
| CVE-2026-127082 | HIGH | 7.7 | Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated u… | 2026-11-13 |
| CVE-2026-127083 | MEDIUM | 6.4 | Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because Outbound… | 2026-11-13 |
| CVE-2026-127084 | HIGH | 7.3 | Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authe… | 2026-11-13 |
| CVE-2026-127085 | MEDIUM | 4.3 | Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove en… | 2026-11-13 |
| CVE-2026-127086 | MEDIUM | 6.3 | Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to take over… | 2026-11-13 |
| CVE-2026-127087 | LOW | 3.1 | Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to revoke ot… | 2026-11-13 |
| CVE-2026-127088 | HIGH | 8.1 | 2FAuth before 9.0.1 contains a weak password recovery vulnerability that allows unauthenticated attackers to p… | 2026-11-13 |
| CVE-2026-127090 | HIGH | 8.8 | Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.… | 2026-11-13 |
| CVE-2026-127091 | MEDIUM | 6.8 | Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.… | 2026-11-13 |
| CVE-2026-127092 | MEDIUM | 6.1 | BuildAdmin 1.0.1 through 2.3.9 contains a stored cross-site scripting vulnerability that allows unauthenticate… | 2026-11-13 |
| CVE-2026-127093 | MEDIUM | 5.5 | Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations… | 2026-11-13 |
| CVE-2026-127094 | HIGH | 7.6 | Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registe… | 2026-11-13 |
| CVE-2026-128014 | HIGH | 8.1 | FrankenPHP standalone static binaries 1.8.0 before 1.13.2 bundle the PHP brotli extension statically linked wi… | 2026-11-13 |
| CVE-2026-128015 | MEDIUM | 6.5 | FrankenPHP before 1.13.4 contains a use-after-free vulnerability that leaves a dangling pointer to a freed env… | 2026-11-13 |
| CVE-2026-128016 | MEDIUM | 6.5 | FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of… | 2026-11-13 |
| CVE-2026-128017 | LOW | 3.7 | FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SG(request_info).conte… | 2026-11-13 |
| CVE-2026-128018 | LOW | 3.7 | FrankenPHP before 1.13.4 contains a denial of service vulnerability in worker mode where frankenphp_handle_req… | 2026-11-13 |
| CVE-2026-128019 | MEDIUM | 4.8 | FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that leaks per-reques… | 2026-11-13 |
| CVE-2026-128020 | MEDIUM | 5.9 | FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter tha… | 2026-11-13 |
| CVE-2026-128021 | LOW | 3.7 | FrankenPHP before 1.13.2 contains an information disclosure vulnerability that allows later clients to read ea… | 2026-11-13 |
| CVE-2026-128022 | MEDIUM | 5.3 | FrankenPHP before 1.13.2 contains a resource exhaustion vulnerability that allows unauthenticated clients to t… | 2026-11-13 |
| CVE-2026-128023 | HIGH | 7.4 | FrankenPHP before 1.13.0 contains an authentication bypass vulnerability that allows unauthenticated attackers… | 2026-11-13 |
| CVE-2026-128024 | MEDIUM | 5.9 | FrankenPHP before 1.13.0 contains a denial of service vulnerability in goArray() that allows remote attackers … | 2026-11-13 |
| CVE-2026-128025 | MEDIUM | 6.5 | FrankenPHP before 1.13.0 contains a path-split interpretation conflict in splitPos in cgi.go that allows unaut… | 2026-11-13 |
| CVE-2026-128026 | MEDIUM | 6.4 | FrankenPHP from 1.5.0 before 1.13.0 contains an incomplete environment sandbox vulnerability in which putenv w… | 2026-11-13 |
| CVE-2026-128027 | CRITICAL | 9.8 | FrankenPHP Docker images before 1.1.11 were rebuilt only when new base image tags were created, so security fi… | 2026-11-13 |
| CVE-2026-128028 | MEDIUM | 4.7 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scriptin… | 2026-11-13 |
| CVE-2026-128029 | MEDIUM | 4.7 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scriptin… | 2026-11-13 |
| CVE-2026-128030 | MEDIUM | 5.9 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an insufficient session expi… | 2026-11-13 |
| CVE-2026-128031 | LOW | 3.8 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization v… | 2026-11-13 |
| CVE-2026-128032 | MEDIUM | 4.4 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 accepts the free (No Payment Informat… | 2026-11-13 |
| CVE-2026-128033 | MEDIUM | 4.3 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure vu… | 2026-11-13 |
| CVE-2026-128040 | MEDIUM | 6.1 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scriptin… | 2026-11-13 |
| CVE-2026-128041 | HIGH | 8.0 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 serves RSS feeds with a text/html con… | 2026-11-13 |
| CVE-2026-128042 | LOW | 3.7 | OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping… | 2026-11-13 |